Privacy · Updated 2026-05-11

What we store, why, and how to revoke it.

MindShift is built on biometric data. That makes privacy a product feature, not a compliance footnote. This notice explains exactly what we hold on the public website — separately from the protocol itself.

Who we are

MindShift is operated under the Cognitra brand. Cognitra is currently an unregistered technology studio based in Katowice, Poland — we have not yet incorporated as a limited liability company because we have not yet reached the revenue threshold that would warrant it.

Because Cognitra is not yet a legal entity, the data controller under GDPR / RODO is the natural person operating it:

What this notice covers

This page describes data we collect from visitors to mindshift.cognitra.pl. The MindShift program itself — the VR sessions and biometric capture — is governed by a separate, signed program agreement with each participant.

Storage on this website

We use browser local storage rather than third-party cookies for the public site. The keys we set are:

  • mindshift-cookie-consent — your choice from the consent banner, with timestamp.
  • mindshift-ambient-muted — whether you toggled the ambient music on or off.
  • mindshift-audio-guide-seen — flag so the “play ambient sound” tooltip only appears once.

All three are essential to the user experience. We currently set no analytics, marketing, or third-party tracking cookies.

If we add analytics

We may later add privacy-respecting analytics (e.g. Plausible or a self-hosted equivalent). When we do, the consent banner will distinguish them as a separate, opt-in category. If you have already chosen “Essential only” we will continue to honor that choice.

Waitlist form

When you submit the waitlist form we receive the name, email, company, role, interest and optional message you provided. We use this data only to:

  • Reply to your inquiry, usually directly from Eryk or Michał.
  • Place you in the appropriate cohort or contact list.
  • Reach out if a relevant program slot opens up.

Legal basis: legitimate interest (responding to your inbound request) and, where applicable, consent (further outreach). You can revoke at any time by emailing cognitra.adm@gmail.comwith the word “delete”.

Your rights under GDPR / RODO

  • Access — request a copy of any personal data we hold about you.
  • Rectification — ask us to correct anything inaccurate.
  • Erasure — ask us to delete your data (subject to legal retention).
  • Portability — request your data in a machine-readable form.
  • Objection — object to processing based on legitimate interest.
  • Complaint — lodge a complaint with the Polish supervisory authority (UODO).

We respond within 30 days. Usually within 48 hours. Reach out to cognitra.adm@gmail.com or call +48 737 893 094.

Data we deliberately do not collect on this site

  • No biometric data. Biometric capture only occurs inside a signed MindShift program.
  • No third-party advertising cookies.
  • No fingerprinting or cross-site tracking.
  • No automatic enrichment from data brokers.

Changing your cookie / storage choice

Click Cookie preferences in the footer, or clear the mindshift-cookie-consentkey from your browser's local storage. The banner will reappear and you can choose again.

Updates to this notice

We update this page when we change what we store. The Updated date at the top reflects the most recent change. When Cognitra incorporates as a Polish sp. z o.o., this notice will be revised to name the new legal entity as controller alongside a transition statement.